Ledger Nano S will never be getting a firmware upgrade again may thus be one of the safest hardware wallets, assuming their RNG actually worked... How ironic.